From owner-freebsd-stable@FreeBSD.ORG Thu Dec 2 14:47:56 2004 Return-Path: Delivered-To: freebsd-stable@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 820ED16A4CE for ; Thu, 2 Dec 2004 14:47:56 +0000 (GMT) Received: from smtp.io.com (smtp.io.com [206.224.87.28]) by mx1.FreeBSD.org (Postfix) with ESMTP id 2D95943D55 for ; Thu, 2 Dec 2004 14:47:56 +0000 (GMT) (envelope-from eighner@io.com) Received: from io.com (aus-as1-7.io.com [199.170.90.7]) by smtp.io.com (8.13.1/8.13.1) with SMTP id iB2ElcYh081739; Thu, 2 Dec 2004 08:47:39 -0600 (CST) (envelope-from eighner@io.com) Date: Thu, 2 Dec 2004 08:43:45 -0600 (CST) From: Lars Eighner To: Ivan Voras In-Reply-To: <41AF215D.9020500@fer.hr> Message-ID: <20041202084228.C57504@goodwill.io.com> References: <41AF0258.5000601@fer.hr> <200412021207.iB2C7sT0075380@drugs.dv.isc.org> <41AF215D.9020500@fer.hr> MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII; format=flowed X-Virus-Scanned: ClamAV 0.80/533/Sat Oct 16 20:09:44 2004 clamav-milter version 0.80j on smtp.io.com X-Virus-Status: Clean cc: stable@freebsd.org Subject: Re: Unkillable zombie sshd-s? X-BeenThere: freebsd-stable@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Production branch of FreeBSD source code List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 02 Dec 2004 14:47:56 -0000 On Thu, 2 Dec 2004, Ivan Voras wrote: > Mark Andrews wrote: >>> Is there a way to find out what has happened and why does the situation >>> occur? (I can't reboot the server for testing) >> >> You can't kill them because they are already dead. They >> are just holding state so that the parent process can know >> how they died. Once the parent process wait()'s on them >> (or the parent dies) they will disappear. > > I knew that (except the bit that they're ukillable by design :) ), but I was > hoping it's a known ssh problem - this is the first time I saw sshd processes > as zombies (and it seems they've been zombies for a long time, so parents are > probably in error). > > Can I find out what their parent processes are? (something like tree-shaped > ps?) No tree, but try ps -axl. PPID = parent process ID -- Lars Eighner eighner@io.com -finger for geek code- http://www.io.com/~eighner/index.html 8800 N IH35 APT 1191 AUSTIN TX 78753-5266